Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File:                     ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier:          ZIyAzpDaW+jrg6Xg1Lud+sMLJmtBeFCa1GgLVRwua+w=
Subject key identifier:   1F:18:32:6B:9E:27:DC:11:88:AA:6B:ED:65:A9:50:BD:58:CA:04:1F
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer:       /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial:       01987BD2D1D0ABE716CEE6DDE58E08515F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 20:01:10 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:10 +0000
Manifest next update:     Wed 06 Aug 2025 20:01:10 +0000
Files and hashes:         1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
                          2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: dgU2+Qho769GK9EPa3AYLLDSKsbKU1r8sdSBQ7lySmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:d1:d0:ab:e7:16:ce:e6:dd:e5:8e:08:51:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
        Validity
            Not Before: Aug  5 20:01:10 2025 GMT
            Not After : Aug  6 20:01:10 2025 GMT
        Subject: CN=1f18326b9e27dc1188aa6bed65a950bd58ca041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:63:76:a0:31:5f:52:70:23:ae:74:5b:2b:
                    75:be:aa:f9:44:04:ae:72:59:9b:3d:10:f6:fc:1b:
                    6c:b2:f4:9f:e7:08:7b:ba:8d:7e:f8:71:eb:d6:71:
                    f5:6f:58:94:69:90:db:d0:8e:dc:32:f8:5a:85:7d:
                    2b:92:36:ce:4f:6f:dd:67:c9:3c:48:12:fe:37:31:
                    30:48:8e:2e:69:96:dc:19:a0:3d:68:c9:59:90:19:
                    c3:17:a4:70:95:3f:49:fb:00:cb:e5:26:79:e1:f1:
                    61:f2:0a:a0:fa:4f:c7:7c:f6:1d:41:d4:9a:08:0e:
                    76:40:90:8e:57:c8:78:bf:76:e8:43:e4:56:e9:db:
                    81:7e:f8:0d:db:85:47:bb:d7:01:68:7c:ae:45:5e:
                    e8:a7:16:4c:04:67:77:f5:92:34:5b:14:4a:f0:a0:
                    c7:a3:7f:ce:34:80:b9:2c:f9:48:2e:ff:01:06:ef:
                    17:51:02:6b:87:9e:54:8b:d4:c7:09:83:eb:10:91:
                    a7:6e:0c:d4:e1:50:0b:40:bf:32:a9:b9:9e:9b:b5:
                    7b:df:62:91:7e:6d:98:4c:ea:03:92:d7:63:b1:3f:
                    a0:5d:6a:77:58:62:2c:6e:50:07:68:ba:58:fd:7a:
                    b8:4a:ce:9f:05:29:75:78:0a:c3:91:73:dd:3c:8c:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:18:32:6B:9E:27:DC:11:88:AA:6B:ED:65:A9:50:BD:58:CA:04:1F
            X509v3 Authority Key Identifier:
                keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:82:94:a1:be:62:be:24:70:31:87:c9:90:4d:5d:8b:50:
         62:d7:e2:0f:e7:9e:3e:59:94:82:1e:1e:28:5b:ca:a3:3c:54:
         46:d7:be:7c:94:93:e7:44:90:84:58:94:5e:74:71:b2:6f:bd:
         51:3b:fe:0a:9e:d2:49:b3:82:92:2d:be:5e:b6:fa:e9:18:19:
         61:af:ff:8b:3f:79:96:df:b4:ed:c8:df:89:9e:e4:74:2e:44:
         f0:5f:40:ed:4b:7c:e9:dd:8f:df:c0:26:52:91:f1:1d:37:64:
         85:d8:69:4f:41:f5:9a:eb:6c:4b:4a:5a:df:b7:09:1c:b1:10:
         68:69:42:f4:06:5c:0c:43:1c:98:5f:0b:83:19:bb:64:64:e7:
         03:36:c5:e0:33:af:8b:c7:04:e2:e5:19:8f:84:7a:f5:42:47:
         17:bb:94:56:b0:2f:e5:a5:60:8b:f0:bd:e5:e3:98:5e:1a:54:
         de:94:d3:7e:a6:a3:54:9a:47:c2:56:39:12:40:82:e3:20:3a:
         92:0e:26:60:64:d2:b3:56:42:11:35:16:dc:2c:72:dd:5e:2f:
         5d:4f:90:d7:df:8d:6a:0a:cc:80:aa:27:f1:19:c1:61:c5:47:
         89:9c:e0:1d:36:7e:91:71:2e:bb:54:51:e9:6d:fd:88:8f:cb:
         a5:6c:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:32 2025 by rpki-client